Arndale Centre Holdings and your personal data
This is Arndale Centre Holdings’ Privacy Policy. It sets out how we collect and process your personal data, what we use it for, and gives you important information on how you can amend information we hold on you such as amending or removing consent for marketing communications or updating your personal details. If you have any queries about this policy or how we handle any personal data you provide to us, please contact us using the details provided at the bottom of this document.
"Personal Data" is any data that identifies you. The Personal Data which you supply to us you agree will be true. We will deal with your Personal Data in compliance with the current UK & EU data protection legislation, which includes the EU General Data Protection Regulation (GDPR) which comes into force on 25th May 2018. Please note this applies only to services which we operate and control and not to other companies' or organisations' websites to which we may link. For such external services or sites please see their Privacy Policies to understand how they might be handling your data.
How to contact us
Controller and contact details
For the purposes of relevant data protection legislation, we are a controller of your personal data. As a controller we use (or process) the personal data we hold about you in accordance with this privacy notice.
If you need to contact us in connection with the use or processing of your personal data, then you can do so using our contact details on our website, https://www.arndaleaccrington.co.uk/
Who is Arndale Centre Holdings?
Arndale Centre Holdings owns and operates Arndale Accrington shopping centre in the UK.
Our Purpose for Collecting and Processing Personal Data
Our intention is to provide the best possible experience for visitors to our shopping centres, the retailer brands and people that work there, and the local community in which we operate. We collect and process data in order to understand who our customers are, send them of appropriate and relevant information, track the performance of our centres, and to help provide and improve our services as a whole.
Some data is required in order to operate our services to you, and in some cases, we are required to hold certain information for legal compliance, law enforcement or contractual purposes.
Legal Basis
Data protection laws set out a number of valid reasons for the collection and processing of personal data. These include: Consent, such as ticking a box to opt-in to receive marketing emails from us; legitimate Interest; compliance with the law; and, to fulfil contractual obligations.
What Data We Collect
When entering competitions, either in-centre or via our website, we collect personal data like your contact information in order to administer the competition, for example to ensuring age restrictions are adhered to and in order to notify winners. Prior to 25th May 2018 by entering you will also have been opted-in to receive marketing communications from Arndale Centre Holdings in line with pre-GDPR regulations, namely ‘implied consent’. After 25th May 2018 consent to receive news and updates from Arndale Centre Holdings requires a separate and unbundled consent from the competition entry.
Personal details are required, which provides members with offers and promotions at Arndale Centre Holdings. These details are required to administer informing them of the current offers and promotions.
We may collect electronic data such as IP addresses or device information when you use the Arndale services such as the websites or mobile apps in order to monitor the performance of those services and improve their quality. However, the data will only be disclosed on an anonymous and aggregated basis not in a way in which you will be personally identified, unless consent to the contrary has been given.
For businesses operating within our centre, such as retailers and kiosk traders, we collect business and personal data such as names and contact details in order to create contracts and administer our business operations. Some of this information is required to conduct these services.
Our car parks utilise number plate recognition systems in order to provide an efficient service, monitor usage and provide information for security purposes. If required to do so we may provide this information to law enforcement agencies.
To protect our centre, shoppers, and retail staff we operate CCTV systems throughout our centre and car parks which record images for security. We do this on the basis of our legitimate business interests. If required to do so we may provide this information to assist with law enforcement.
We do not currently employ any automated decision-making tools.
Use of personal Data for Marketing Communications
We only send post, email, text messages and mobile notifications to you about news and services that we consider may be of interest to you only if you have given us permission to do so or if appropriate where we consider there to a legitimate interest in the information for example if you have joined our Social Media page or communicated through our website.
If you have agreed to be contacted by telephone, then calls may be monitored and recorded for quality and training purposes.
Electronic notifications may be sent to you via your internet browser if you have given consent for us to do so. If you subsequently wish to remove consent for these, you can do so following the instructions provided by your internet browser software.
Mobile push notifications may also be sent to registered users of the Social Media page. If you do not want to receive these, you can let us know via telephone on 01254 301310 or email [email protected]
Who Controls or Has Access to the Data?
Personal data is accessed and processed by staff at Arndale Centre Holdings and Property Partners management Limited, involved in operating the relevant shopping centre services. The use of personal data will remain under the control of Arndale Centre Holdings C/O Property Partners Management Limited at all times operating as the Data Controller. Arndale Centre Holdings do not sell your data to other companies without your explicit permission.
In compliance with the law we may be obligated to disclose Data about you to a law enforcement agency or by a court order.
Personal Data is held and processed only within the EU.
Data subjects have various rights in relation to accessing and amending the data companies hold on them under GDPR. More information on how to do this can be found later in this document.
Your personal data is not shared with other companies for their own purposes unless specifically stated at the time of collection and you have given your permission. An example of potential cases when this might happen would be for during competitions run with partners where we offer a tick box for you to opt-in to receive information from that company as well as from ourselves. If you opt-in to receive information from the additional company, please see their Privacy Policy for information on how they handle your data.
Your Rights
We will only store your data for as long as is necessary to comply with the requirements of your contract with us, and any legal obligations or lawful processing conditions that may exist as a result.
You have a number of rights concerning the personal information we use, which you may ask us to observe. In some cases, even when you make a request concerning your personal information, we may not be required, or be able to carry out your request as this may result in us not being able to fulfil our legal and regulatory obligations under the lawful processing conditions under which we hold your data or because there is a minimum statutory period of time for which we have to keep your information.
You can ask us to:
If you have any questions or concerns about this privacy notice or your data protection rights, please contact us using our details set out at the beginning of this privacy notice.
You also have the right to make an enquiry or to complain to the Information Commissioner’s Office (ICO) if you are unhappy with our use of your data, or if you think we have breached a legal requirement. Further details about the ICO are available at: www.ico.org.uk.